dbt-engineering

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill's packages.yml lists external dbt packages (dbt-labs/dbt_utils and calogica/dbt_expectations) which are fetched via dbt deps at runtime and provide macros that are executed as part of dbt runs, so they are runtime remote code dependencies (flagged: "dbt-labs/dbt_utils" and "calogica/dbt_expectations").